12c57097ed3230de94f313c6a05916f2c001e24ba9d17a1bb382a06abd315c0e

Analysis

max time kernel
131s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 03:37

Target

65e04ed63af53476f23ec7f6a9ce4812_JaffaCakes118.exe
Size

3.8MB
MD5

65e04ed63af53476f23ec7f6a9ce4812
SHA1

6a50eb6a8e155c035b27353cd7d878f6815d618c
SHA256

12c57097ed3230de94f313c6a05916f2c001e24ba9d17a1bb382a06abd315c0e
SHA512

5ab0dc43e3eceb43e290ef70a1022e6716d24711150e62b40c5b0afe0b0b0e04f6d2f988e8a5bfb02621b9682731883ad9fccf785d9cda5e39ec5d109ac47873
SSDEEP

49152:Da8Hz1hzcFtE9NRESo/ckGKhRRkfrrfRv3BEW/T+:b7zn9WLDRkfPRPuq

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2288 828 WerFault.exe 65e04ed63af53476f23ec7f6a9ce4812_JaffaCakes118.exe

pid	pid_target	process	target process
2288	828	WerFault.exe	65e04ed63af53476f23ec7f6a9ce4812_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\65e04ed63af53476f23ec7f6a9ce4812_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\65e04ed63af53476f23ec7f6a9ce4812_JaffaCakes118.exe"
1⤵
PID:828

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 828 -s 916
2⤵
- Program crash
PID:2288

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 828 -ip 828
1⤵
PID:3576

memory/828-0-0x00000000027D0000-0x00000000027D1000-memory.dmp

Filesize
4KB

Download
memory/828-1-0x0000000000400000-0x00000000007E0000-memory.dmp

Filesize
3.9MB

Download